PT-2019-13501

Name of the Vulnerable Software and Affected Versions LayerBB version 1.1.3 Description The issue allows for XSS via the pm title variable in the application/commands/new.php file. Recommendations For LayerBB version 1.1.3, consider restricting the use of the pm title variable in the...

CVE-2019-13972: Improper Neutralization of Input During Web Page Generation

LayerBB 1.1.3 allows XSS via the application/commands/new.php pmtitle variable, a related issue to CVE-2019-17997...